Harbor replication with client cert

[aceeric]

I posted this in issues but perhaps it's better as a discussion:

I'm want to configure replication between Harbor and an external Docker registry that requires two-way TLS. The external registry obtains the CN from the client cert and uses the CN to determine the push/pull entitlements for that CN. Is it possible to configure replication between Harbor and an external registry such that Harbor (as the client) provides a client cert to the external registry - as in two-way TLS? I can see the "Access Secret" field and some associated documentation for Amazon ECR and Google GCR but no documentation on how to configure this specific use case. Looking through the code, for the Docker Registry type of endpoint, the access ID and access secret are passed as basic auth credentials. Thank you for any assistance.